CVEvulnerability

CVE-2024-10474

6.5 MEDIUM Published 2024-10-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-10-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-287

Description

Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.

Affected configurations

• mozilla firefox focus (< 132.0)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References